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233 


"virtual machine" and (virus "malicious 


USPAT ; 


2003/10/07 






code" ) 


US-PGPUB; 


09: 13 








EPO; JPO; 










DERWENT ; 










IBM TDB 




- 


13 


"virtual machine" with (virus "malicious 


USPAT; 


2003/03/18 






code" ) 


US-PGPUB; 


10:56 








EPO; JPO; 










DERWENT ; 










IBM TDB 




- 


0 


200206928 .URPN. 


USPAT 


2003/03/18 










10:51 


- 


1 


2002-171858. NRAN. 


DERWENT 


2003/03/18 










10:51 


- 


7 


"virtual machine" with (playpen sandbox 


USPAT; 


2003/03/18 






"play pen" "sand box") 


US-PGPUB; 


15:59 








EPO; JPO; 










DERWENT; 










IBM TDB 




- 


18 


(virus "malicious code") with signature 


USPAT; 


2003/03/18 






and "virtual machine" 


US-PGPUB; 


16:00 








EPO; JPO; 










DERWENT ; 










IBM TDB 




_ 


29 


(("5398196") or ("5675711") or 


USPAT 


2003/03/19 






("5696822") or ("5864803") or ("5907834") 




08:38 






or ("4400769") or ("5440723") or 










("5774727") or ("5872978") or ("6092194") 










or ("6118940") or ("6154844") or 










("6167520") or ("5842002") or ("6275938") 










or ("6357008") or ("5854916") or 










("6067410") or ("5590331") or ("6021510") 










or ("6003132") or ("5999723") or 










("5964889") or ("5765030") or ("5826013") 










or ("6199181") or ("5121345") or 










("5623600") or ( "5 649095 ")). PN . 








13 


(("5978917") or ("5983348") or 


USPAT 


2003/03/19 






("6029256") or ("6081894") or ("6094731") 




08: 40 






or ("6108799") or ("6119165") or 










("6122738") or ("6272641") or ("6324627") 










or ("6338141") or ("6397242") or 










("4975950") ) . PN. 






_ 


0 


(({"5978917") or ("5983348") or 


USPAT 


2003/03/19 






("6029256") or ("6081894") or ("6094731") 




08:41 






or ("6108799") or ("6119165") or 










("6122738") or ("6272641") or ("6324627") 










or ("6338141") or ("6397242") or 










("4975950") ) .PN. ) and (({"5398196") or 










("5675711") or ("5696822") or ("5864803") 










or ("5907834") or ("4400769") or 










("5440723") or ("5774727") or ("5872978") 










or ("6092194") or ("6118940") or 










("6154844") or ("6167520") or ("5842002") 










or ("6275938") or ("6357008") or 










("5854916") or ("6067410") or ("5590331") 










or ("6021510") or ("6003132") or 










("5999723") or ("5964889") or ("5765030") 










or ("5826013") or ("6199181") or 










("5121345") or ("5623600") or 










("5649095") ) . PN . ) 
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((("5978917") or ("5983348") or 


US PAT 


2003/03/19 






("6029256") or ("6081894") or ("6094731") 




13:33 






or ("6108799") or ("6119165") or 










("6122738") or ("6272641") or ("6324627") 










or ("6338141") or ("6397242") or 










("4975950") ) .PN. ) ((("5398196") or 


« 








("5675711") or ("5696822") or ("5864803") 










or ("5907834") or ("4400769") or 










("5440723") or ("5774727") or ("5872978") 










or ("6092194") or ("6118940") or 










("6154844") or ("6167520") or ("5842002") 










or ("6275938") or ("6357008") or 










("5854916") or ("6067410") or ("5590331") 










or ("6021510") or ("6003132") or 










("5999723") or ("5964889") or ("5765030") 










or ("5826013") or ("6199181") or 










("5121345") or ("5623600") or 










("5649095") ) . PN . ) 






- 


2 


(!'20020056076") . PN. 


US PAT ; 


2003/03/19 








US-PGPUB; 


10: 14 








EPO; JPO; 










DERWENT ; 










IBM TDB 




_ 


0 


compar$4 with behavior with pattern and 


US PAT 


2003/03/19 






heuristic and virus 




13:34 


_ 


2 


compar$4 with behavior with pattern and 


US PAT 


2003/03/19 






virus 




13:34 


_ 


4 


compar$5 with behavior with virus 


US PAT 


2003/03/19 








13:34 


_ 


8 


compar$5 with behavior with virus 


USPAT; 


2003/03/19 






US-PGPUB; 


14:14 








EPO; JPO; 










DERWENT ; 










IBM TDB 




_ 


0 


"virtual machine" with "visual basic" 


USPAT; 


2003/03/19 






with engine 


US-PGPUB; 


14:15 








EPO; JPO; 










DERWENT; 










IBM TDB 




_ 


9 


"virtual machine" with "visual basic" 


USPAT; 


2003/03/19 








US-PGPUB; 


14:22 








EPO; JPO; 










DERWENT; 










IBM TDB 




_ 


14 


"virtual machine" same "visual basic" 


USPAT; 


2003/03/19 








US-PGPUB; 


14:22 








EPO; JPO; 










DERWENT ; 










IBM TDB 




_ 


5 


("virtual machine" same "visual basic") 


USPAT; 


2003/03/19 






not ("virtual machine" with "visual 


US-PGPUB; 


14 :23 






basic") 


EPO; JPO; 










DERWENT; 










IBM TDB 




- 


0 


"virtual machine" with vbscript 


USPAT; 


2003/03/19 








US-PGPUB; 


14 :24 








EPO; JPO; 










DERWENT; 










IBM TDB 




_ 


251 


("virtual machine" VM) with (vbscript vb 


USPAT; 


2003/03/19 






"virtual basic") 


US-PGPUB; 


14:25 








EPO; JPO; 










DERWENT; 










IBM TDB 






8 


(("virtual machine" VM) with (vbscript vb 


USPAT; 


2003/03/19 






"visual basic")) not (("virtual machine" 


US-PGPUB; 


14:25 






VM) with (vbscript vb "virtual basic")) 


EPO; JPO; 










DERWENT ; 










IBM TDB 
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("virtual machine" VM) with (vbscript vb 


USPAT; 


2003/03/19 






"visual basic") 


US-PGPUB; 


14:27 








EPO; JPO; 








• 


DERWENT ; 










IBM TDB 




_ 


12 


("virtual machine" VM) with (vbscript 


USPAT; 


2003/03/19 






"visual basic") 


US-PGPUB; 


14:31 








EPO; JPO; 










DERWENT; 










IBM TDB 




_ 


9 


"visual basic" with emulat$3 


USPAT; 


2003/03/19 








US-PGPUB; 


15:27 








EPO; JPO; 










DERWENT ; 










IBM TDB 




_ 


12 


(computer code) with virus and compar$5 


USPAT; 


2003/03/19 






with behavior 


US-PGPUB; 


15:30 








EPO; JPO; 










DERWENT; 










IBM TDB 






38 


717/135. eels. 


USPAT; 


2003/03/19 








US-PGPUB; 


15:30 








EPO; . JP07 










DERWENT; 










IBM TDB 




_ 


39 


717/134. eels. 


USPAT; 


2003/03/19 








US-PGPUB; 


15:30 








EPO; JPO; 










DERWENT; 










IBM TDB 






869 


detect$3 with program with modif$7 


USPAT; 


2003/03/19 






US-PGPUB; 


15 :31 








EPO; JPO; 










DERWENT ; 










IBM TDB 




_ 


13 


detect$3 with program with modif$7 with 


USPAT; 


2003/03/19 






virus 


US-PGPUB; 


15:31 








EPO; JPO; 










DERWENT; 










IBM TDB 




_ 


209 


717/124. eels. 


USPAT; 


2003/03/20 








US-PGPUB; 


07:40 








EPO; JPO; 










DERWENT; 










IBM TDB 




_ 


96 


717/126. eels. 


USPAT; 


2003/03/20 








US-PGPUB; 


07:41 








EPO; JPO; 










DERWENT ; 










IBM TDB 






170 


717/131. eels. 


USPAT; 


2003/03/20 








US-PGPUB; 


07:41 








EPO; JPO; 










DERWENT; 










IBM TDB 




_ 


1555 


713/200. eels. 


USPAT; 


2003/03/20 








US-PGPUB; 


07:41 








EPO; JPO; 










DERWENT; 










IBM TDB 




_ 


2 65 


713/200. eels, and virus 


USPAT; 


2003/03/20 








US-PGPUB; 


07: 42 








EPO; JPO; 










DERWENT; 










IBM TDB 






130 


713/187. eels. 


USPAT; 


2003/03/20 








US-PGPUB; 


07:42 








EPO; JPO; 










DERWENT; 










IBM TDB 
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713/188. eels. 








USPAT; 
US-PGPUB; 
EPO; JPO; 
DERWENT; 
IBM TDB 


2003/03/20 
07:43 




266 


714/37. eels. 








USPAT; 
US-PGPUB; 
EPO; JPO; 
DERWENT; 
IBM TDB 


2003/03/20 
07:43 




722 


714/38 .eels. 








USPAT; 
US-PGPUB; 
EPO; JPO; 
DERWENT; 
IBM TDB 


2003/03/20 
07:43 




46 


(714/37. eels. 714/38. eels. ) 


and 


virus 


USPAT; 


2003/03/20 














US-PGPUB; 


07: 43 














EPO; JPO; 
















DERWENT ; 
















IBM TDB 
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"virtual operating 


system" 






USPAT; 
US-PGPUB; 
EPO; JPO; 
DERWENT ; 
IBM TDB 


2003/08/04 
15:43 




9 


"virtual operating 
malicious) 


system" 


and 


(virus 


USPAT; 
US-PGPUB; 
EPO; JPO; 
DERWENT; 
IBM TDB 


2003/08/04 
15:52 


- 
_ 


4 
15 


"virtual operating 
"0206928" 


system" 


and 


heuristic 


USPAT; 
US-PGPUB; 
EPO; JPO; 
DERWENT; 
IBM TDB 
USPAT; 
US-PGPUB; 
EPO; JPO; 
DERWENT; 
IBM TDB 


2003/08/04 
16:30 

2003/08/04 
17:32 




0 


"computer immune system". ti. 




USPAT; 


2003/08/04 














US-PGPUB; 


17:33 














EPO; JPO; 
















DERWENT; 
















IBM TDB 






1 


("0206928") . PN. 








USPAT; 


2003/08/04 












US-PGPUB; 
EPO; JPO; 
DERWENT; 
IBM TDB 


17:33 




34 


"van der made". in. 








USPAT; 
US-PGPUB; 
EPO; JPO; 
DERWENT; 
IBM TDB 


2003/08/04 
18:20 


_ 


25 


"virtual os" 








USPAT; 
US-PGPUB; 
EPO; JPO; 
DERWENT; 
IBM TDB 


2003/08/04 
18:24 




1 


simulate with detect$3 with code with 


USPAT; 


2003/08/04 






"virtual machine" 








US-PGPUB; 
EPO; JPO; 
DERWENT; 
IBM TDB 


18:31 




1 


emulate with detect$3 with 


code 


with 


USPAT; 


2003/08/04 






"virtual machine" 








US-PGPUB; 
EPO; JPO; 
DERWENT ; 
IBM TDB 


18:31 
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emulat$3 with virus with execut$3 with 


USPAT; 


2003/08/04 






code 


US-PGPUB; 
EPO; JPO; 
DERWENT; 
IBM TDB 


18:34 


_ 


13 


("4975950" | "5121345" I "5144660" | 
"5319776" | "5321840" I "5349655" 1 
"5359659" | "5398196" I "5408642" I 
"5421006" | "5440723" | "5442699" I 
"5485575") .PN. 


USPAT 


2003/08/04 
18:33 




1 


(("4975950" [ "5121345" j "5144660" | 


USPAT; 


2003/08/04 






"5319776" | "5321840" | "5349655" | 


US-PGPUB; 


18:39 






"5359659" | "5398196" | "5408642" | 


EPO; JPO; 








"5421006" | "5440723" | "5442699" | 


DERWENT; 








"5485575") .PN. ) and "virtual machine" 


IBM TDB 






16 


"virtual machine" with {viral virus) 


USPAT; 
US-PGPUB; 
EPO; JPO; 
DERWENT; 
IBM TDB 


2003/08/04 
18:39 




36 


"van der made ".in. 


USPAT; 
US-PGPUB; 
EPO; JPO; 
DERWENT; 
IBM TDB 


2003/10/02 
11:03 




2 


("5278901") . PN. 


USPAT; 
US-PGPUB; 
EPO; JPO; 
DERWENT; 
IBM TDB 


2003/10/02 
11:04 




0 


"ALADDIN KNOWLEDGE SYSTEMS LTD. ".as. 


USPAT; 
US-PGPUB; 
EPO; JPO; 
DERWENT ; ' 
IBM TDB 


2003/10/02 
15:33 




0 


"ALADDIN KNOWLEDGE SYSTEMS LTD." 


USPAT; 
US-PGPUB; 
EPO; JPO; 
DERWENT ; 
IBM TDB 


2003/10/02 
15:33 


- 


49 


"ALADDIN KNOWLEDGE SYSTEMS" 


USPAT; 
US-PGPUB; 
EPO; JPO; 
DERWENT ; 
IBM TDB 


2003/10/02 
15:39 




1 


2001-498350. NRAN . 


DERWENT 


2003/10/02 
15:35 




5 


esaf e 


USPAT; 
US-PGPUB; 
EPO; JPO; 
DERWENT; 
IBM TDB 


2003/10/02 
15:39 


_ 


8 


"virtual machine" and heuristic with 


USPAT; 


2003/10/03 






virus 


US-PGPUB; 
EPO; JPO; 
DERWENT; 
IBM TDB 


14:01 


_ 


11 


"virtual machine" and (heuristic 


USPAT; 


2003/10/03 






polymorphic) with virus 


US-PGPUB; 
EPO; JPO; 
DERWENT; 
IBM TDB 


14 :05 




8 


"SYMANTEC CORPORATION" . as , and 


US PAT ; 


2003/10/03 






(polymorphic heuristic) with virus 


US-PGPUB; 


15 :08 






EPO; JPO; 
DERWENT ; 
IBM TDB 






12 


{{"5371871") or ("5991856") or 


USPAT; 


2003/10/03 






("6240531") or ("6513122") or ("6584508") 


US-PGPUB; 


15: 18 






or ("6587888") or (" 6594 686" }). PN. 


EPO; JPO; 
DERWENT; 
IBM TDB 
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"windows emulator" and virus 


USPAT; 


2003/10/03 








US-PGPUB; 


15:24 








EPO; JPO; 






- 




DERWENT; 










IBM TDB 




_ 


5 


windows with emulator and virus with 


USPAT; 


2003/10/03 






(heuristic polymorphic) 


US-PGPUB; 


15:50 






EPO; JPO; 










DERWENT; 










IBM TDB 




_ 


2 


("20020059563") .PN. 


USPAT; 


2003/10/03 






US-PGPUB; 


15:50 








EPO; JPO; 










DERWENT ; 










IBM TDB 




_ 


0 


emulat$3 with $thread$ with ("operating 


USPAT; 


2003/10/06 






system" OS) and virus with heuristic 


US-PGPUB; 


08:21 






EPO; JPO; 










DERWENT ; 










IBM TDB 




_ 


5 


emulat$3 with {"operating system" OS) and 


USPAT; 


2003/10/06 






virus with heuristic 


US-PGPUB; 


08:25 








EPO; JPO; 










DERWENT; 










IBM TDB 




_ 


8 


emulat$3 with {"operating system" OS) 


USPAT; 


2003/10/06 






with virus 


US-PGPUB; 


08:27 








EPO; JPO; 










DERWENT; 








4 


IBM TDB 






3 


(simulat$3 emulat$3) with virus and API 


USPAT; 


2003/10/06 






with {simulat$3 emulat$3) 


US-PGPUB; 


08:29 






EPO; JPO; 










DERWENT; 










IBM_TDB 






1 


emulat$3 with windows with virus 


USPAT; 


2003/10/06 






US-PGPUB; 


08:41 








EPO; JPO; 










DERWENT ; 










IBM TDB 






2 


("5485575") . PN. 


USPAT; 


2003/10/06 






US-PGPUB; 


09:46 








EPO; JPO; 










DERWENT; 










IBM TDB 






1 


emulat$3 with api and virus with 


USPAT; 


2003/10/06 






heuristic 


US-PGPUB; 


09:47 








EPO; JPO; 










DERWENT ; 










IBM TDB 






1 


emulat$3 with api and virus and heuristic 


USPAT; 


2003/10/06 






US-PGPUB; 


09:47 








EPO; JPO; 










DERWENT; 










IBM TDB 




_ 


4 


emulat$3 with api and virus 


USPAT; 


2003/10/06 






US-PGPUB; 


09:50 








EPO; JPO; 










DERWENT ; 










IBM TDB 




_ 


1 


emulat$3 with api and sandbox 


USPAT; 


2003/10/06 






US-PGPUB; 


09:50 








EPO; JPO; 










DERWENT; 










IBM TDB 
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("4654799" 1 "4688169" | "4796220" I 


USPAT 


2003/10/06 






"4982430" 1 "5222134" I "5390314" | 
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"5842017" 1 "58504 4 6" ) . PN. 







Search History 10/16/03 1:09:53 PM Page 6 
C: \APPS\EAST\Workspaces\09642625 . wsp 





205 


emulat$3 with api 


USPAT; 


2003/10/06 








US-PGPUB; 


12:53 








EPO; JPO; 










DERWENT; 










IBM TDB 




_ 


125482 


virus bloodhound 


USPAT; 


2003/10/07 








US-PGPUB; 


09: 13 








EPO; JPO; 










DERWENT; 










IBM TDB 




_ 


4 


virus and bloodhound 


USPAT ; 


2003/10/07 








US-PGPUB; 


09:17 








EPO; JPO; 










DERWENT ; 










IBM TDB 




_ 


2 


("6357008") .PN. 


USPAT; 


2003/10/07 






US-PGPUB; 


09:34 








EPO; JPO; 










DERWENT; 










IBM TDB 




- 


2 


("5398196") .PN. 


USPAT; 


2003/10/07 








US-PGPUB; 


09:50 








EPO; JPO; 










DERWENT; 










IBM TDB 




- 


20 


emulat$3 with operating with (environment 


USPAT; 


2003/10/07 






system) and virus with detect$3 


US-PGPUB; 


09:51 






EPO; JPO; 










DERWENT; 










IBM TDB 






1 


(emulat$3 with operating with 


USPAT; 


2003/10/07 






(environment system) and virus with 


US-PGPUB; 


10:00 






detect$3) and $thread$ 


EPO; JPO; 










DERWENT; 










IBM TDB 




_ 


2 


("20020083334") -PN. 


USPAT; 


2003/10/07 






US-PGPUB; 


10: 42 








EPO; JPO; 










DERWENT; 










IBM TDB 






3 


(emulat$3 simulat$3) with API with return 


USPAT; 


2003/10/07 






US-PGPUB; 


10: 44 








EPO; JPO; 










DERWENT; 










IBM TDB 
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(emulat$3 simulat$3) with API 


USPAT; 


2003/10/07 








US-PGPUB; 


10:44 








EPO; JPO; 










DERWENT; 










IBM TDB 
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(emulat$3 simulat$3) with API and virus 


USPAT; 


2003/10/07 








US-PGPUB; 


11:58 








EPO; JPO; 










DERWENT; 










IBM TDB 
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